Shell wildcard expansion (un)safety